X-Git-Url: https://sipb.mit.edu/gitweb.cgi/wiki.git/blobdiff_plain/0a0000c406a2faa2640e885b063a263573799e17..fbb5db26a7ac50f5c152c0fa1a2b43181add44e5:/doc/root-instance.mdwn

diff --git a/doc/root-instance.mdwn b/doc/root-instance.mdwn
index 1747d67..301ed22 100644
--- a/doc/root-instance.mdwn
+++ b/doc/root-instance.mdwn
@@ -113,7 +113,7 @@ be sure to ask for a pts id, if you want to use your tickets with AFS.
 
 You should change your root instance’s password with a command like this, to upgrade your key from critically weak DES encryption algorithm to strong AES encryption:
 
-    kadmin -p andersk/root -q 'cpw -e aes256-cts:normal andersk/root'
+    kadmin -p andersk/root -q 'cpw -e aes256-cts:normal -e aes128-cts:normal andersk/root'
 
 (Note: This might make your password incompatible with a [handful of services](http://debathena.mit.edu/trac/ticket/529) that you should not have been using with your root instance in the first place.)  You can confirm the change with
 
@@ -122,3 +122,5 @@ You should change your root instance’s password with a command like this, to u
 which should list a line like
 
     Key: vno 4, aes256-cts-hmac-sha1-96, no salt
+
+If you change your password again, you will need to specify your desired enctypes with the -e option; otherwise, they will be reset to the defaults.